File: /home/govancoz/mail/.spam/new/1700113951.M823442P3154646.zacp120.ve.host,S=6583,W=6699
Return-Path: <emma_louise5@hotmail.com>
Delivered-To: govancoz+spam@zacp120.ve.host
Received: from zacp120.ve.host
by zacp120.ve.host with LMTP
id B7yLMB+uVWXWIjAAvcbEzQ
(envelope-from <emma_louise5@hotmail.com>)
for <govancoz+spam@zacp120.ve.host>; Thu, 16 Nov 2023 07:52:31 +0200
Return-path: <emma_louise5@hotmail.com>
Envelope-to: cheryl@govan.co.za
Delivery-date: Thu, 16 Nov 2023 07:52:31 +0200
Received: from [72.252.201.215] (port=53450 helo=hotmail.com)
by zacp120.ve.host with esmtp (Exim 4.96.2)
(envelope-from <emma_louise5@hotmail.com>)
id 1r3VIi-00DEML-1J
for cheryl@govan.co.za;
Thu, 16 Nov 2023 07:52:31 +0200
Reply-To: bezos2030@hotmail.com
From: "Bezos Family Foundation" <emma_louise5@hotmail.com>
To: cheryl@govan.co.za
Date: 16 Nov 2023 00:54:08 -0400
Message-ID: <20231116005408.C9617F58774704C6@hotmail.com>
MIME-Version: 1.0
Content-Type: text/html
Content-Transfer-Encoding: quoted-printable
X-Spam-Status: Yes, score=44.3
X-Spam-Score: 443
X-Spam-Bar: ++++++++++++++++++++++++++++++++++++++++++++
X-Spam-Report: Spam detection software, running on the system "zacp120.ve.host",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
root\@localhost for details.
Content preview: Reply To: bezos2030@hotmail.com THE BEZOS FAMILY FOUNDATION:
BY JEFF & JACKIE BEZOS Hi Dear,
Content analysis details: (44.3 points, 5.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
1.5 NA_DOLLARS BODY: Talks about a million North American dollars
1.4 FSL_HELO_FAKE No description available.
0.2 FREEMAIL_REPLYTO_END_DIGIT Reply-To freemail username ends in
digit
[bezos2030[at]hotmail.com]
4.7 RCVD_IN_XBL RBL: Received via a relay in Spamhaus XBL
[72.252.201.215 listed in zen.spamhaus.org]
3.6 RCVD_IN_PBL RBL: Received via a relay in Spamhaus PBL
0.2 FREEMAIL_ENVFROM_END_DIGIT Envelope-from freemail username ends
in digit
[emma_louise5[at]hotmail.com]
4.0 SPF_FAIL SPF: sender does not match SPF record (fail)
[SPF failed: Please see http://www.openspf.org/Why?s=mfrom;id=emma_louise5%40hotmail.com;ip=72.252.201.215;r=zacp120.ve.host]
4.0 SPF_HELO_FAIL SPF: HELO does not match SPF record (fail)
[SPF failed: Please see http://www.openspf.org/Why?s=helo;id=hotmail.com;ip=72.252.201.215;r=zacp120.ve.host]
0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail
provider
[emma_louise5[at]hotmail.com]
0.0 HTML_MESSAGE BODY: HTML included in message
0.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts
1.2 RCVD_IN_BL_SPAMCOP_NET RBL: Received via a relay in
bl.spamcop.net
[Blocked - see <https://www.spamcop.net/bl.shtml?72.252.201.215>]
2.7 RCVD_IN_PSBL RBL: Received via a relay in PSBL
[72.252.201.215 listed in psbl.surriel.com]
1.3 RCVD_IN_VALIDITY_RPBL RBL: Relay in Validity RPBL,
https://senderscore.org/blocklistlookup/
[72.252.201.215 listed in bl.score.senderscore.com]
2.0 PYZOR_CHECK Listed in Pyzor
(https://pyzor.readthedocs.io/en/latest/)
0.2 KAM_DMARC_NONE DKIM has Failed or SPF has failed on the message
and the domain has no DMARC policy
0.0 LOTS_OF_MONEY Huge... sums of money
2.0 RDNS_NONE Delivered to internal network by a host with no rDNS
2.0 PDS_HELO_SPF_FAIL High profile HELO that fails SPF
0.0 KAM_DMARC_STATUS Test Rule for DKIM or SPF Failure with Strict
Alignment
-0.0 T_SCC_BODY_TEXT_LINE No description available.
0.1 GAPPY_SUBJECT Subject: contains G.a.p.p.y-T.e.x.t
1.6 FSL_BULK_SIG Bulk signature with no Unsubscribe
0.8 PDS_HP_HELO_NORDNS High profile HELO with no sender rDNS
0.0 SPOOFED_FREEMAIL_NO_RDNS From SPOOFED_FREEMAIL and no rDNS
2.2 MONEY_FREEMAIL_REPTO Lots of money from someone using free
email?
1.0 FREEMAIL_REPLYTO Reply-To/From or Reply-To/body contain
different freemails
0.0 XFER_LOTSA_MONEY Transfer a lot of money
2.0 TO_NO_BRKTS_NORDNS_HTML To: lacks brackets and no rDNS and HTML
only
0.0 T_FILL_THIS_FORM_SHORT Fill in a short form with personal
information
0.8 SPOOFED_FREEM_REPTO Forged freemail sender with freemail
reply-to
2.5 MONEY_FORM_SHORT Lots of money if you fill out a short form
0.0 FORM_FRAUD Fill a form and a fraud phrase
2.0 ADVANCE_FEE_2_NEW_MONEY Advance Fee fraud and lots of money
X-Spam-Flag: YES
Subject: ***SPAM*** Re: Goodnews: 150 M i l l i o n US D o l l a r s Donation Through You. You Should Contact Me Right Away!
<html><head>
<meta name=3D"GENERATOR" content=3D"MSHTML 11.00.9600.19431">
<meta http-equiv=3D"X-UA-Compatible" content=3D"IE=3Dedge">
</head>
<body><p>Reply To: <a href=3D"mailto:bezos2030@hotmail.com">bezos2030@hotma=
il.com</a></p><p><u>THE BEZOS FAMILY FOUNDATION: BY JEFF & JACKIE =
BEZOS</u></p><p>Hi Dear,</p><p>
This is Jeff Bezos. I am the CEO/Owner of Amazon and Blue Origin. You have =
been selected to represent our charity organization by making a donation to=
you in the sum of $150,000,000 (One Hundred And Fifty Million US Doll=
ars). The donation is to help you empower the children of the Motherle=
ss Babies' Homes including the Less Privileged. To receive this funds you s=
hould send in the following information.</p><p>1. Your Full Name:</p><p>2. =
Your Age:</p><p>3. Male/Female:</p><p>
4. Country/Nationality:</p><p>5. Country Currently Living:</p><p>6. Mobile =
Number:</p><p>Kindly send the details as required above to: <a href=3D"mail=
to:bezos2030@hotmail.com">bezos2030@hotmail.com</a></p><p>Congratulations!<=
/p><p>With Warm Regards,</p><p>Jeff Bezos<br>CEO/Owner of Amazon =
& Blue Origin<br>Email: <a href=3D"mailto:bezos2030@hotmail.com">bezos2=
030@hotmail.com</a><br></p></body></html>